join-firelightfi[.]xyz

join-firelightfi.xyz is assessed as a generic phishing domain with elevated risk, currently confirmed as offline following security enforcement actions. The domain is associated with credential harvesting infrastructure impersonating a digital asset protection service.

Technical telemetry indicates resolution to IP 188.114.96.3 under Cloudflare hosting infrastructure. VirusTotal analysis reports 6 of 95 security vendors flagging the domain. Registration records show NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. The domain appears on 3 security blocklists and has been assigned a Gridinsoft trust score of 0/100. It is also recorded in 2 AlienVault OTX threat intelligence pulses. The page title observed is "Firelight - The Protection Layer for Digital Assets".

Although the domain is currently taken offline, historical indicators confirm phishing intent and active threat classification. Mitigation actions should include blocking IP 188.114.96.3 at network perimeter, enforcing domain-level filtering for similar Framer Sites deployments, and monitoring for credential reuse attempts. Users potentially exposed should reset passwords immediately and enable multi-factor authentication. Security teams should ingest all listed indicators into threat intelligence platforms and review logs for any pre-takedown interaction events.